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£SJ ■ Abstract. Some relationships between the arithmetic and the geome- 

try of Lipschitz and Hurwitz integers are here presented. In particular, 
it is shown that the vector product of two left multiples of a Lipschitz 
integer a with any other Lipschitz integer is still a left multiple of a, 
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and that the vector product of a Lipschitz integer a with two other such 
1 integers orthogonal to it is both a left and a right multiple of a. 
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I. Introduction 

Frenicle de Bessy seems to have been the first to notice that one can 
obtain a factorization of an integer n from two different decompositions of 
n as a sum of two squares f[D]. vol. I, cap. XIV, p. 360). This amounts to the 
fact that a decomposition n = a 2 + b 2 gives a factorization n = (a+bi)(a — bi) 
in Z[z], and if one has another decomposition n = c 2 + d 2 , then, using the 
Euclidean algorithm in Z[i], one gets the gcd of a + hi and c + di, whose 
norm yields a factor of n. 
l/") \ As Bachet de Meziriac conjectured and Lagrange proved, every number 

is a sum of four squares ([D]. vol. II, cap. VIII, p. 275). Such a decomposition 
04 ! of an integer n yields a factorization n = ad in the ring of Hurwitz integers. 
Since this ring is both a left and a right Euclidean domain, it is natural to 
wonder if two distinct decompositions of a number as a sum of four squares 
could yield, in a manner analogous to the above, a factorization of that 
number. Moreover, while there is no known fast algorithm to decompose 
a number as a sum of two squares, there is a very efficient probabilistic 
algorithm, due to Rabin and Shallit [RSJ, to express a number as a sum of 
four squares. Therefore, if all worked well, one would get in this manner an 
interesting factorization algorithm. 

However, if one has two decompositions n = ad = (3(3, it is not always 
the case that a and (3 will have a non-trivial gcd. In fact, for a number 
that is a product of two odd primes, n = pq, only a small (for p and q big) 
fraction, exactly gjpw^n > °f a ^ possible pairs a, (3 will have a gcd whose 
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norm is neither 1 nor n. But, in [P], Gordon Pall proves a series of inter- 
esting results (namely, theorems 6 and 7), which imply, in particular, that 
given two quaternions a and (5 with integral pairwise coprime coordinates, 
if they are orthogonal and have the same norm, then they either have the 
same right divisors, or the same left divisors, or both. This suggests look- 
ing for orthogonal decompositions of an integer as a sum of four squares, 
i.e. orthogonal integral quaternions whose norm is that integer. 

It was this line of thought that made us study ways of constructing 
quaternions that are orthogonal to a given quaternion, namely using the 
vector product, and that led to the discovery of the main results here pre- 
sented, namely theorems 14.31 and 14.41 Although this results are negative for 
the purposes mentioned above, we believe that they are interesting in their 
own, showing some intimate connections between geometry and arithmetic 
in the realm of quaternions. 

In section [21 after summarizing some of the basic facts on quaternions, 
we recall the unique factorization theorem for Hurwitz integers and a result 
of Gordon Pall that offers some additional information on factorizations. 
In section [3] we collect some results on relations between orthogonality and 
some arithmetical properties of integral quaternions. In particular, we prove 
a simple result, theorem 13 A\ that could possibly lead a factorization method 
that differs from the ones that are currently known. Finally, in section HJ we 
prove some arithmetical results on crossed products of integral quaternions. 

2. Quaternions, Lipschitz and Hurwitz integers 

We start by recalling that the quaternion ring H is the division ring 
formed by the additive group M 4 endowed with the only multiplication de- 
termined (so one gets a ring structure) by choosing ei as the multiplicative 
unit and by the relations: 

2 2 2 i 

e 2 = e 3 = e 4 = e 2e 3 e 4 = -1, 

where {ei, e2, e3, 64} is the canonical basis of R 4 . Usually, in this context, 
one denotes the elements of this basis by l,i,j,k, respectively. Given a 
quaternion u = a+bi+cj + dk, its conjugate is defined by u = a — bi — cj — dk, 
and its norm is N(w) = uu. 

The quaternions with integral coordinates are called Lipschitz integers, 
and they form a subring of H that we will denote by L. This is almost a left 
Euclidean ring for the norm, in the sense that for any a, j3 G C one can find 
q,r G £ such that a = f3q+r and N(?") < N(/3), but a strict inequality cannot 
always be guaranteed (and the same for right division). In fact one needs 
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only to slightly enlarge C by adding the quaternions whose coordinates are 
all halves of odd numbers to obtain a (left and right) Euclidean ring. This 
yields the set H = C U (to + C), with to — |(1 + % + j + k), whose elements 
are called Hurwitz integers. One can easily show that any Hurwitz integer 
has both a left and a right associate which is a Lipschitz integer. 

In particular, every left or right ideal of % is principal, and from this, a 
sort of unique factorization into primes can be deduced for primitive Hur- 
witzian integers, i.e. those not divisible by a rational prime. We recall that a 
Hurwitz prime is simply an Hurwitz integer whose norm is a rational prime. 

Theorem 2.1 (Unique Factorization Theorem). To each factorization of 
the norm n of a primitive Hurwitzian integer a into a product p\Pi ■ ■ -pk-iPk 
of rational primes, there is a factorization 

a = 7Ti7r 2 • • • TTk-lTlk 

of a into a product of Hurwitzian primes modelled on that factorization of 
n, that is, with N(vTj) = pi. 

Moreover, if a = 7Ti7T2 • • • T^k-i^k is any one factorization modelled on 
P1P2 ' ' 'Pk-iPk; then all the others have the form 

a = 7Ti£i ■ E~l 1 1X 2 E2 ■ E 2 1 1X 2 Ez ^i^fe-l^ • E^TTk, 

where s±, . . . , £ W , i.e. the factorization on a given model is unique up 
to unit-migration. 

This result is essentially contained in [L] (p. 434), where Lipschitz proves 
that integral quaternions have that same sort of unique factorization up to 
factors of norm 2. For a modern proof see Theorem 2, p. 57 in |CSj . 

Given m G N, a quaternion a = a + hi + cj + dk £ C is said to be 
primitive modulo m if gcd(a, b, c, d, m) = 1. In [P] (theorem 1), Pall proves 
the following result: 

Theorem 2.2. If a £ C is primitive modulo m, where m is odd and positive 
with m I N(a), then a has exactly a set of eight right divisors of norm m, in 
C, all of them left-associated. One has an analogous result for left divisors. 

Notice that while theorem 12 . II relates factorizations modelled on the same 
prime decomposition of the norm, theorem 12.21 gives information about fac- 
torizations of a primitive quaternion modelled on different prime decom- 
position of its norm. For example, if a = 7ri7r27r3 is a factorization of a 
primitive quaternion a corresponding to N(a) = P1P2P3, and a = ^2 7l i 7r 3 
is a factorization corresponding to N(ct) = P2P1P3, then it follows from the 
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last theorem that 7Ti7T2 and it'^x are right associates, and therefore 7r 3 and 
773 are left associates. 

3. Orthogonality and Arithmetic 

From the expression of the product of two generic quaternions, u and v, 
it immediately follows that one has, for the inner product u ■ v, 

(3.1) u ■ v = — (uv + vu) . 

This very simple observation can be used to obtain some curious relations 
between common divisors, the inner product and orthogonality, as it will 
be demonstrated in this section. In what follows, we will use the notation 
u _L v to mean that the quaternions u and v are orthogonal, i.e. u ■ v = 0. 

Theorem 3.1. For any u,v,w G H, one has 

(uv) ■ (uw) = N(m) (v ■ w). 

In particular, if a, (3 G £ have a common left divisor r, then N(t) | a ■ /3. 
One has analogous results for right common divisors. 

Proof. All follows immediately from: 

2 (uv) ■ (uw) = uvvju + uwvu = u (vw + wv) u = 2 (v ■ w) N(u). 

□ 

Corollary 3.2. Let e, 5 G {l,i,j,k} with e 7^ 5. Then, for any a G H ; 
ae _L a5 and ea _L 5a. 

Proof. This is an immediate consequence of the previous proposition, and 
the fact that e _L 5. □ 

It follows from theorem 6 in [P] that two non-associate Hurwitzian primes 
cannot be orthogonal. We show here that this can be directly deduced from 
the unique factorization theorem. 

Theorem 3.3. If a, (3 G H are primes with the same norm, and a _L (3, 
then each one is a left and right associate of the other. 

Proof. Let p = N(a) = N(/3). From a _L /3 one gets that a/3 = —(3a. Now, 
if the quaternion 7 = a/3 is not primitive, then m \ 7 for some m G N 
with m > 1. But then, from m 2 | N(7) = p 2 , it follows that m = p. But 
then a/3 = pe = ep, for some unit e. Since p = (3(3, one gets a = e(3. From 
(3a = —a(3 = pe, one gets (3 = —ea (and in this case one sees that e 2 = — 1, 
and therefore e = ±2, ±j, ±/c). 
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If 7 is primitive, then a/3 and —(3a are two factorizations of 7 modelled 
on N(7) = pp, and the unique factorization theorem implies that a and f3 
are right associates. 

Finally note that a _L (3 =>• a _L (3, which allows to deduce the left version 
of the result from its right version, and vice-versa. □ 

With non-primes one can obtain examples that are a little more inter- 
esting. For instance, from the previous corollary, it follows that if tt and p 
are any two quaternions, then irip and np have the same norm and are or- 
thogonal. The question of what exactly is the left greatest common divisor 
of these two quaternions, led to: 

Theorem 3.4. Let 7 = z + wj G C, with z,w G Z[z], be an odd quaternion 
(i.e. 7 has an odd norm). Then: 

[iy,y) R = l (z,w) = l (inZ[i)), 

where (S) R denotes the right ideal generated by the elements of S. 

Proof. It is clear that if 5 \ z and 5 \ w, with 5 G Z[i], then 5 is a left 
divisor of 27, since of course 5 | 7 and it commutes with i. Therefore, 
(z,w) = (5) (iy,y) R C (S) R . 

On the other hand, putting I = (iy,y) R , and since iy = zi + wk, yi = 
zi — wk, one has: 

2zi = iy + yi G / 

and 

2wk = iy — yi G /. 

Hence: 

2z,2w G I. 

Now, (2, N(7)) = 1 implies that there are x, y G Z such that 2x + yyy = 1. 
In particular, there is x G Z with 2x = 1 (mod /). From this one concludes 
that z,w G /, and so, if these are coprime, it follows that 1 = 1. □ 

Note that from an algorithm to compute nip from the quaternion up 
one would get a factorization algorithm for integers. In fact, suppose we 
have a semi-prime number n = pq with p and q to be determined. Using 
an algorithm like the one in |RSj . one can find a G C such that N(«) = ^, 
and one has a = np, for some primes 7T, p G If one could determine 
7rzp from a, then using the Euclidean algorithm, one would get 7r and p, 
since the previous result easily implies that (nip, np)^ = tt (and, in an 
entirely analogous way, (7iip,Trp) L = p). This would yield p and q. To get 
an interesting factoring algorithm it would, of course, be enough to find 
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a method to determine a reasonable sized neighborhood in the orthogonal 
space to a where nip would be located. 



4. The vector product in H and the arithmetic of C 
We start by recalling the notion of vector product in W 1 . 

Definition 4.1. For u 1; u 2 , . . . , u n _! e M n , define their vector product by 
x (ui, u 2 , . . . , u„_i) = ui x u 2 x • ■ ■ x u n _i : = 

U n -l,l Mn-1,2 ' ' ' W n _i in 

ei e 2 • • ■ e n 

(with the obvious meaning), where ej is the i-th vector of the canonical 
basis of IR n , and Uij is the j-th coordinate of the vector Uj, on that same 
basis. 

It easily follows from this definition that, for any vectors Uj, Vj, v G M n , 
where i, j = 1, . . . , n — 1, one has: 



1) (m x u 2 x ■ • • x u n _ x ) ■ v 



M n-l,l u n-l,2 ' ' ' 

«i u 2 •■■ W„ 



(2) (ui x u 2 x • • • x u n _i) _L Uj, for alH = 1, . . . , n — 1. 

(3) (m x u 2 x • • • x u n _i) ■ (vi x v 2 x • ■ ■ x v n _i) = det(uj ■ y,) 



From this last relation, one sees that, for any a, (3, j £ H 

N(a x (5 x 7) = (a x (3 x 7) ■ (a x (5 x 7) 



N(o;) a • /3 a • 7 
«•/? N(/3) /3-7 
a • 7 /3 • 7 N(7) 



from which one easily gets 



N(a x p x 7) = N(a/?7) - N(a)(/3 • 7) 2 - N(/3)(a • 7) 2 - 

-N(7)(a-/3) 2 + 2(a-/3)(a-7)(/3- 7 ). 

In particular, if /3 J_ a and 7 1 a, then N(a) | N(a x /3 x 7). It follows 
from theorem 12.21 that a x /3 x 7 has a left and a right divisor both with 
the same norm as a. We will show that, in both cases, a is that divisor. In 
order to do that, we need the following result. 
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Lemma 4.2. Let a = a + bi + cj + dk G C be a primitive quaternion, and 
let gi = (a, b), g 2 — (c, d), and xq, yo, Zq, t G Z be such that: axo + by = g\, 
cz + dt = g 2 . Then the Z-module a 1 - PI C is generated by the quaternions: 

g2(x + y i) - gi(z + t i)j, -(b-ai), ~(d-ci)j 

9i 92 

Proof. Suppose we are given a = a + bi + cj + dk G C, primitive. We want to 
find all vectors in C^a^. Put g\ = (a, b), g 2 = (c, d), and let Xo, yo, z , t G Z 
be such that: 

(4.1) ax + byo = g x 

(4.2) cz + dt = g 2 

Now, the elements 7 = x + yi + zj + tk G C such that 

(4.3) ax + by + cz + dt = 0. 
must satisfy 

ax + by = r\gi 
cz + dt = r 2 g 2 , 

for some n, r% G Z with ri^i +r 2 (72 = 0. Because a is primitive, (gi,g 2 ) = 1, 
and therefore there exists r G Z such that ri = rg 2 and r 2 = —rgx- It 
then follows from the well known caracterization of the solutions of linear 
Diophantine equations that: 



(4.4) 
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b 


X 


= nxo + 


— s 


= rg 2 x H s 






9i 


9i 






a 


a 


y 


= riy - 


— s 


= rg 2 yo s 






9i 


9i 






d 


d 


z 


= r 2 z + 


— u 


= -rgxZQ H u 






92 


g2 






c 


c 


t 


= r 2 t - 


— u 


= -rgito u, 






92 


g2 



for some s, u G Z. □ 

Theorem 4.3. Given a G C, and /3, 7 G C such that (3 J_ a and 7 _L a, 

one has 

ax/3x7Ga£n Ca. 

Proof. Let a = a+bi + cj + dk G C, which may be assumed to be a primitive, 
without loss of generality. Let g\ = (a,b), g 2 = (c,d), and xq, yo, z , to G Z 
be as in theorem l4.2l Since, by that result, the Z-module a _L n£ is generated 
by the quaternions: ft = g 2 (x + y i) - #i(z + t i)j, (3 2 = ^(6 - ai), (3 3 = 
^ 2 (d — ci)j, it is enough to check the validity of the claimed statement for 



8 A. MACHIAVELO AND L. ROQADAS 

the products a x fi\ x (3 2 , a x fli x f3 3 , and a x (3 2 x /3 3 . Now, more or less 
straighforward computations show that: 

a x /3 2 x (3 3 = a(— j) (a + bi)(c — di) 

9i92 

= (a + bi)(c + di)(— j)a. 

9x92 

a x Pi x 02 — Oi{g 2 i — jib — ai)(z — t i)) 

= (~g 2 i+ j(b + ai)(z -t i))a. 

a x (3i x /3 3 = + fc(<i + ci)(yo — xq%)) 

= (gii + k(d + ci)(y + x i))a. 

□ 

Using corollary 13.21 one sees that, for example, a x ai x aj G a£ PI Ha. 
While doing some computational experiments, we noticed that, for example, 
a x ai x /3 G aC. This led to the discovery of the next result. In its proof, one 
needs to compute several vector products, for which it was found convenient 
to consider the exterior algebra, over R: 

/\H = /\°i©/\ 1 i®/\ 2 i©/\ 3 ie/\ 4 i 

where 

/\ 1 H~/\ 3 H~EI. 

One also makes free use of the unique M-linear application /\ 3 H — > HI such 
that, for {ei,e 2 ,e 3 } C {l,i,j,k} satisfying e r ^ ±e s , for all r, s G {1,2,3} 
with r^s, 

which is a (linear) isomorphism and the image of a A A 7 is precisely 

a x (3 x 7. 

Theorem 4.4. Given a,/3,j,6 G £ ; one /tas 

a/3 x cry x 5 G a;£. 

Proof. By (multi)linearity, it is enough to show that the claimed result holds 
for 0, 7, S G {1, i, j, fc}. Let then a = a + 62 + cj + dk, with a, b,c,d G Z, and 
£1, e 2) £3 ^ {!) 2, j, k}. One has: 

aei A ae 2 = {a£\ + biei + cjei + dke{) A (ae 2 + 6262 + cje 2 + (i/c^) = 
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= a 2 (ei A £2) + ab (e\ A ie-i) + ac (£1 A JA2) + ad (e\ A kE2) + 

ab (iei A £2) + b 2 (ie\Aie2) + bc{i£\/\je2) + bd (iei A kE2) + 

ac (je± A £2) + foe (j£i A ie 2 ) + c 2 (j£i A je 2 ) + cd (jei A ke 2 ) + 

(ki A £2) + M (fei A K2) + cd(keiAjE2) + d 2 (kei A fce^)- 

For e 2 one now has only three non-trivial cases to consider, up to sign, 
depending on whether 82 s^ 1 = i,j, k: 

(i) e 2 = iei: 

aei A aiei Ae 3 = (a 2 + 6 2 ) E\ A %E\ A £3 — (c 2 + d 2 ) je x A fei Ae 3 + 
(ac — 6d) (fei A £1 A e 3 + jei A «£i A £3) + 
(ad + 6c) (kei A iei A£ 3 + £iA j£i A £3). 

Now, one has to consider four cases for £ 3 , up to sign: £3/61 = l,i,j, k. For 
£3 = £1, one gets, identifying £j A £j A £& with £j£j£fc, 

«£i x m£i x ei = ( — (c 2 + d 2 )i — (ac — bd)k + (ac? + 6c) j) £^ = 
= (— ak + bj — ci + d)c + (aj + bk — c — di)d)e\ 
= a(—ck + dj)^. 
Analogously, one obtains: 

«£i x m£i x ie\ = a(—cj — dk)e\ 
aei x aiei x j£ x = a(ak + bj)e\ 
ae\ x aiei x = a(—aj + 6/c)^ 

(j) £2 = M 

a£i A aj£i A £ 3 = (a 2 + c 2 ) e 1 A j£ 2 A £ 3 + (6 2 + d 2 ) iei A ke x A £ 3 
+ (a6 + cd) (iei A j£i A £3 + £1 A kei A £3) 
+ (ad — 6c) (kei A j£i A £3 — £1 A iei A £3) 
Now, according to whether £3£7 1 = 1, aj, k, one obtains: 
aei x cr/£i x ei = a(bk — di)e\ 
aei x ajei x iei = a(—ak + ci)e\ 
aei x ajei x jAx = a(—bi — dk)e\ 
aei x ajei x fei = a(ai + ck)e\ 

(k) £ 2 = kei 

aei A aA;£i A £3 = (a 2 + d 2 ) £1 A &£i A £3 — (6 2 + c 2 ) i£i A j£i A £3 
+ (a6 — cd) (iei A kei A £3 — £1 A j£i A £3) 
+ (ac + 6d) (j£i A kei A £3 + £1 A 2£i A £3) 
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Again, according to whether e% e 



i 



l,i,j,k, one obtains: 



as i x akei x e\ 
ot£\ x aks\ x %E\ 
asi x ake\ x jei 
aex x atei x ke\ 



= a(ci — bj)e\ 

= a(aj + di)e\ 

= a(—ai + dj)e\ 

= a(—bi — cj)e\ 



□ 



One obviously has a right version of this result. However, it is not true 
that a(3 x x 5 e £a, as can be seen by taking a = 1 + 2i, (3 = 5 = 1 + i, 
and 7 = 1 + j. 



As pointed out in the introduction, the results here presented where 
obtained while investigating a possible extension, to integral quaternions, 
of the method of factoring an integer from two of its representations as a 
sum of two squares. Some results of G. Pall, contained in [P], led us to look 
for integral quaternions that are orthogonal to a given one. To construct 
these, we turned our attention to the vector product, just to find that this 
did not yield what we where looking for. Nevertheless we obtained results 
that do not seem trivial, and are interesting in their own. 

Along the way, we noticed a simple, but rather curious fact. That, given 
a quaternion a = irp, where ir and p are quaternionic primes, if one can find 
a method of locating the quaternion nip within some "small" neighborhood, 
then one would obtain a factorization algorithm. Of course, the interest of 
such an algorithm would depend on how small that neighborhood would be, 
and how it would grow with respect to the norm of a. 

One thing seems clear: integral quaternions encode factoring informa- 
tion about integers. Therefore, it seems natural to expect that there should 
exist subexponential factorization methods using quaternions. It would be 
interesting to find one, even if not better than the existing methods using 
elliptic curves or number fields. 
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5. Final remarks 
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